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Abstract 

Entanglement purification takes a number of noisy 
EPR pairs |00) + |11) and processes them to pro- 
duce a smaller number of more reliable pairs. If 
this is done with only a forward classical side chan- 
nel, the procedure is equivalent to using a quan- 
tum error-correcting code (QECC). We instead in- 
vestigate entanglement purification protocols with 
two-way classical side channels (2-EPPs) for finite 
block sizes. In particular, we consider the ana- 
log of the minimum distance problem for QECCs, 
and show that 2-EPPs can exceed the quantum 
Hamming bound and the quantum Singleton bound. 
We also show that 2-EPPs can achieve the rate 
k/n = 1 — (i/n)log 2 3 — h(t/n) — 0(l/n) (asymp- 
totically reaching the quantum Hamming bound), 
where the EPP produces at least k good pairs out 
of n total pairs with up to t arbitrary errors, and 
h{x) = — x\og 2 x — (1 — x)log 2 (l — x) is the usual 
binary entropy. In contrast, the best known lower 
bound on the rate of QECCs is the quantum Gilbert- 
Varshamov bound k/n> 1 — (2t/n) log 2 3 — h(2t/n). 
Indeed, in some regimes, the known upper bound on 
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the asymptotic rate of good QECCs is strictly below 
our lower bound on the achievable rate of 2-EPPs. 

1 Introduction 

In order to build a quantum computer, we will prob- 
ably need to use quantum error correcting codes 
(QECCs) to protect the computational qubits from 
noisy operations (see |S] for an introduction to quan- 
tum error correction). Similarly, quantum error cor- 
rection will help preserve qubits stored in a quantum 
memory. Another application is to protect quantum 
data being transmitted over a distance from Alice to 
Bob. 

For the last application, though, a better possi- 
bility exists. In an entanglement purification protocol 
(EPP) JJ Alice prepares a number of EPR pairs and 
transmits half of each to Bob over a noisy quantum 
channel. Alice and Bob then make some measure- 
ments on their parts of the EPR pairs and compare 
results over a noiseless classical side channel. Based 
on their measurements, they then perform local quan- 
tum operations to their remaining qubits to produce 
a smaller number of more reliable EPR pairs. Then, 
using these EPR pairs and the classical side chan- 
nel, Alice teleports her qubits to Bob. If the EPP 
has succeeded, the noise rate in the qubits emerging 

lr The current trend is to instead use the name "entangle- 
ment distillation protocol," or EDP. However, in this paper we 
retain the older and more widespread term EPP. 



from the teleportation protocol is much lower than 
the noise rate in the channel. 

If we allow Alice to transmit classical information 
to Bob, but Bob cannot transmit information to Al- 
ice, the EPP is a one-way EPP (or 1-EPP). 4 showed 
that 1-EPPs are equivalent to QECCs: there is a 
straightforward procedure to convert any QECC to 
a 1-EPP and vice-versa. These protocols are useful, 
for instance, to create a quantum memory, in which 
quantum information is stored for some time before 
being used. The decoder has to decode the message 
using only information stored in the memory, and the 
encoding cannot depend on information about the er- 
rors which may be gained during decoding. Thus, the 
communication is one-way: from the encoder to the 
decoder. 

In contrast, if an EPP is used to transmit infor- 
mation between two parties, Alice and Bob, there is 
no reason to prevent Bob from transmitting classi- 
cal information to Alice. An EPP in which Alice and 
Bob both transmit classical information is known as a 
two-way EPP (or 2-EPP). While a back channel does 
not help for transmitting classical data over a classi- 
cal noisy channel, the classical back channel does help 
in transmitting quantum data over a noisy quantum 
channel. 2-EPPs typically tolerate a much higher er- 
ror rate than 1-EPPs jl| , and in some cases are known 
to also allow substantially higher data rates even for 
low error rates 12] . 

This channel capacity problem is usually consid- 
ered in the model where errors occur independently 
on different qubits with some fixed probability, and 
the goal is to produce a received state with very high 
fidelity in the asymptotic limit of many transmitted 
qubits. If we only wish to transmit a few qubits, it 
makes more sense to consider a small block code. For 
QECCs (and indeed classical error-correcting codes), 
we often consider what is known as the minimum dis- 
tance scenario, in which we transmit n qubits to pro- 
tect k data qubits against up to t single-qubit errors 
during transmission (or in fact against an arbitrary 
error which affects t qubits). When there are t or 
fewer errors, the decoding procedure leaves us with 
exactly the correct state on the k data qubits. When 
there are more than t errors, the state can be wrong 
in arbitrary ways. 



We can define the minimum distance problem for t 
errors as follows: 

Problem 1. Find a protocol which allows Alice to 
transmit k qubits to Bob with perfect fidelity. The 
protocol may use a quantum channel which transmits 
n qubits and applies the operation S <S> /, where S 
is some superoperator acting on t of the qubits (not 
necessarily the first t) and I is the identity on the 
remaining n—t qubits. The protocol may use classical 
side channels, but cannot depend on any properties of 
the quantum channel operation except the fact that it 
acts nontrivially on at most t qubits. 

The usual solution to the minimum distance prob- 
lem is a QECC with distance d = 2t + 1, which re- 
quires no classical side channels. 

In this paper, we consider the minimum distance 
problem for 2-EPPs. Alice prepares n EPR pairs and 
transmits half of each to Bob over the noisy quantum 
channel. The channel, as described above, has the 
property that it applies an arbitrary superoperator 
affecting at most t of the pairs. Then the goal of Alice 
and Bob is to produce, by talking back and forth 
over the classical side channels and performing local 
operations, at least k good EPR pairs. Note that, 
given the promise that there are at most t errors, we 
insist that the protocol always works: While some of 
the protocols we present will sometimes produce more 
than k good pairs, we require that they never produce 
fewer than k correct EPR pairs. We also require that 
the EPR pairs produced are precisely correct (fidelity 
1 to perfect EPR pairs). A 2-EPP that achieves this 
will then provide a solution to the minimum distance 
problem via quantum teleportation. 

Note that for a QECC, the distance encapsulates a 
number of properties of the code. In particular, the 
distance determines the number of errors that can be 
detected and the number of correctable erasure errors 
as well as the number of general errors that can be 
corrected. For a 2-EPP, there does not appear to be 
any single quantity that encapsulates such a broad 
set of properties, so 2-EPPs do not have a "distance" 
in the conventional sense. 
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2 Stabilizer QECCs & 1-EPPs 

We begin by reviewing the basic theory of stabilizer 
quantum error-correcting codes [5] and the relation- 
ship between QECCs and 1-EPPs. 

Definition 1. The Pauli group V is a group consist- 
ing of tensor products of the three matrices 

*-(; ;)."-(; ?)•*-(; -0 (i> 

and i/ie identity I with overall phase ±1, ±z. 

Note that X, Y, and Z anticommute with each 
other (e.g., XZ = —ZX) and that any two elements 
of the Pauli group either commute or anticommute. 
Furthermore, the Pauli group on t qubits is a basis for 
the space of all matrices corresponding to operators 
acting on t qubits. 

Definition 2. A stabilizer S is an Abelian subgroup 
ofV which does not contain —1 or ±i. Let the coding 
space C be the set of states \ip) for which M\tp) = \ip) 
for all M € S . Suppose the stabilizer S has r gener- 
ators Mi, . . . , M r . The error syndrome of P £ V is 
the r-bit string whose ith bit is if P commutes with 
Mi and is 1 if P anticommutes with Mj. Let N(S) be 
the set of Pauli matrices which have error syndrome 
— i.e., which commute with the stabilizer. 

The motivation for the definition of error syndrome 
and for using this formalism for defining quantum 
codes is that if a state \ip) is a -fl-eigenvector of an 
operator M, and E anticommutes with M (EM = 
-ME), then E\tp) is a -1-eigenvector of M. Thus, 
looking at a simple property of the stabilizer allows 
us to evaluate the code's ability to detect and correct 
errors [7||S]. 

Theorem 1. If there are n qubits and the stabilizer 
S has r generators, then the coding space C has di- 
mension 2 n ~ r . That is, the code encodes k = n — r 
qubits. The set of undetectable errors for the code 
is N(S) \ S . The code corrects any set £ C V for 
which E^F <£ N(S) \ S for all E,F e £. Thus, the 
code corrects t errors if N(S) \ S contains no Pauli 
operations acting on fewer than 2t + 1 qubits. 



Definition 3. If a stabilizer code corrects a set of 
errors £ , and there exist E, F € £ such that E* F 6 S 
but E 7^ F , then the code is said to be degenerate 
or impure. Otherwise the code is non-degenerate or 
pure. 

The error correction procedure is simply to mea- 
sure the eigenvalue of each of the generators of S. 
(For each generator, the 2™ dimensional space of all 
states on n qubits decomposes into a direct sum of 
two 2 ra_1 dimensional subspaces, one consisting of all 
eigenvectors of the operator with eigenvalue 1, the 
other consisting of all eigenvectors with eigenvalue 
-1. "Measuring the eigenvalue" means that we mea- 
sure if the state belongs to the first or the second of 
these subspaces, in the process projecting the state 
onto the appropriate subspace.) 

The correct state has eigenvalue +1, but if error 
P has occurred, the actual eigenvalue is — 1. This 
gives us the error syndrome, and from there we can 
deduce the error and correct it. For a non-degenerate 
code, all the error syndromes are distinct, so the error 
syndrome uniquely identifies the error. The errors are 
not uniquely identified for a degenerate code, but it 
does not matter, because errors which have the same 
error syndrome act exactly the same way on encoded 
states. 

This suggests how we can perform an EPP based 
on any stabilizer QECC. Alice prepares a number of 
EPR pairs 1 00) + |11), and sends the second half to 
Bob. If there are no errors in the channel, Alice, 
when she measures any Pauli operator M on her side, 
will get a predictable measurement result relative to 
Bob's when he measures the same M on his side. In 
particular, Alice and Bob can each measure the gen- 
erators of a stabilizer S on their own side. In the 
absence of errors, they should get the same measure- 
ment result for any generator with an even number 
of Ys, and the opposite measurement result for any 
generator with an odd number of Ys. 2 That is, if 
Alice's measurement results form the vector a and 
Bob's measurement results form the vector b, then 
a © b = s, where the jth bit of s is the parity of the 
number of Ys in the jth generator of S. On the other 

2 The state 1 00) + |11) is a +1 cigcnstate of Xa ® Xb and 
Za (g) Zg , but a — 1 eigenstate of Y\ <g> Yg . 
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hand, if the channel has performed a Pauli error P, 
they will get different results: a®b = sffie, where e 
is precisely the error syndrome of P with respect to 
S. Thus, if Alice sends her measurement results to 
Bob, Bob can compare Alice's results to his, deduce 
the error syndrome of P, and correct it just as if he 
were using a quantum error-correcting code. Alice 
and Bob have measured 2r qubits, destroying the en- 
tanglement of r pairs, but n — r = k pairs are left 
over. 

Note that the remaining entanglement will actu- 
ally be distributed across many or all of the original 
n pairs, so Alice and Bob must perform a decoding 
operation to extract it. Alice and Bob have each 
projected their state onto a codeword of the QECC 
with stabilizer S with some known syndrome a (Al- 
ice's measurement results), and must therefore per- 
form the decoding operation for S to get back the k 
EPR pairs they desire. 

QECCs and EPPs correct more general errors than 
just Pauli errors because of the linearity of quantum 
mechanics. In fact, if a code (or EPP) corrects a set 
of errors £, it also corrects any errors in the linear 
span of £. Therefore, a code or EPP which corrects 
Pauli errors on up to t qubits actually corrects any 
error affecting up to t qubits an d thus provides 

a solution to the minimum distance problem. 

3 Stabilizers and 2-EPPs 

Along the same lines, we can construct a class of 2- 
EPPs as adaptive stabilizer codes. The model is as 
follows. Alice and Bob measure r commuting Pauli 
operators, one by one. After measuring each oper- 
ator, they both send their measurement results to 
each other. Then they XOR the results, obtaining 
one bit of the error syndrome. The [i + l) st opera- 
tor can depend on the results obtained in the first i 
measurements but has to commute with all the pre- 
viously measured operators. The end result is that 
Alice and Bob have measured the generators of one 
stabilizer code out of a larger family. The choice 
of which code, however, depended on the results of 
early measurements. To specify a 2-EPP, we there- 
fore need to describe a rule for choosing operators to 



measure based on the outcomes of previous measure- 
ments. Note that the procedure is a 2-EPP and not 
a 1-EPP because Alice needs to know Bob's results 
before she knows which operators to measure. (This 
type of EPP has been called a stabilizer EPP, and is 
characterized more precisely in Definition 4 of 9 .) 

At the end of protocol, Alice and Bob apply local 
unitary transformations Ua and U b which may de- 
pend on the results of the measurements during the 
protocol. They succeed if, for any error on at most 
t EPR pairs, the protocol produces k perfect EPR 
pairs. 

3.1 2-EPPs that correct 1 error 

As the first example, consider the following 2-EPP 
which produces 2 good EPR pairs from 6 EPR pairs 
in the presence of 1 error. (There is no QECC which 
can do this for qubits Alice and Bob measure 

X ®X ®X ®X (2) 

z ® z ® z ® z 

on the first four pairs. These two operators generate 
the stabilizer for a code detecting an arbitrary sin- 
gle error — any single-qubit Pauli operator will be 
outside N(S). There are two possibilities: 

• They detect an error (get a non-zero error syn- 
drome) . In this case, they know there is an error 
in the first four pairs, and therefore none in the 
last two, since there is a maximum of one error. 
They therefore discard all of the first four pairs, 
and keep the remaining two. 

• They detect no error (zero error syndrome). 
Since there is again a maximum of one error, and 
they would have detected any single error on the 
first four pairs, they know the first four pairs 
must be correct. They used up two pairs for the 
measurement, but they still have two left. In this 
case, the two pairs that are left do not directly 
correspond to any of the original four pairs. In- 
stead, Alice and Bob must each perform a lo- 
cal circuit equal to the decoding operation for 
the four-qubit QECC with the appropriate syn- 
drome. If there was no error on the four pairs 



4 



at the beginning, then the decoding procedure 
gives Alice and Bob two pairs with no errors. 

It may at first appear that this 2-EPP falls slightly 
outside the adaptive stabilizer code construction, as 
it involves discarding unwanted pairs. However, it 
can easily be rewritten as a degenerate adaptive sta- 
bilizer code, simply by measuring a complete set of 
operators for the discarded pairs. For instance, if 
Alice and Bob detect an error with the first two mea- 
surements, they then also measure X®X®I®I and 
Z ® Z ® I ® I on the first four pairs. 

Next, we present a 2-EPP that produces 2 m — m — 2 
good EPR pairs from 2 m — 1 pairs if there is up to one 
error. This should be compared with the best family 
of 1-error-correcting QECCs known, which protect 
k = 2 m — to — 2 qubits with n = 2 m qubits if there is 
up to one error \7\. 

Alice and Bob start by measuring X®^ 2 If 
they detect an error, they know that there is a Y or 
Z error. Then, they localize it by binary search, in 
m— 1 steps. Before the i th localization step, Alice and 
Bob have a set S, t of 2 m+1 ~ l - 1 or 2 m+1 - i candidate 
EPR pairs. They have measured the product of X 
on this set and they have detected an error in it. If 
i > 1, they have also measured i — 1 Pauli operators 
on pairs not in Si. In the i th localization step, Alice 
and Bob divide Si into sets S[ and S'/ , one containing 
2 m ~ % EPR pairs and the other containing either 2 m ~ 4 
or 2 m ~ 4 — 1 pairs. Then, they measure the product of 
X operators over all pairs in S^. Together with the 
previous measurement (the product of X over Si), 
this is equivalent to measuring the product of X in 
S^ and the product of X in S". If there is an error 
in then Alice and Bob set Si+i = S^. Otherwise, 
Si+ 1 = Sj . 

After to — 1 such steps, Alice and Bob have a set S m 
consisting of 1 or 2 EPR pairs, they have measured 
the product of X for S m and they know that S m 
contains a damaged EPR pair. Then, Alice and Bob 
discard pairs in S m . The other 2™ - 2 or 2 m - 3 
pairs are good and only to — 1 of them have been 
measured. (Altogether, Alice and Bob have measured 
1 + (to — 1) pairs but one of those measurements has 
been on discarded pairs only.) Therefore, they have 
at least 2™ — to — 2 good EPR pairs. 



The second case is if the first measurement (prod- 
uct of X on all EPR pairs) detects no error. Then, 
there is either no error at all or an X error on one 
of 2 m — 1 EPR pairs. This means that there are 
1 + (2 m — 1) = 2 m possibilities for error. With m 
more measurements, Alice and Bob can distinguish 
which one of those has happened. To do that, they 
number the EPR pairs by numbers 0, 1, . . . , 2 m — 2. 
Each of those numbers can be written in binary with 
to digits. Alice and Bob measure the product of Z 
operators for all EPR pairs whose numbers have the 
first digit equal to 0, the product of Z operators for 
all EPR pairs whose numbers have the second digit 
equal to 0, etc. That is, they measure the parity 
checks for the Hamming code of length n = 2 m — 1. 
If there is an X error on the i th EPR pair, each mea- 
surement gives us one bit of i (the bit is if the 
corresponding measurement detects an error and 1 if 
it does not detect an error) . All to measurements to- 
gether uniquely determine i. It remains to see what 
happens if there is no error. Then no measurement 
detects error, implying that cither there is no error 
or the error is in the location that has 1 in every bit. 
If the location has all to bits equal to 1, its number 
must be 2 m — 1 but Alice and Bob do not have an 
EPR pair numbered 2 m — 1. Therefore, they know 
for certain that there has been no error. 

After that, Alice and Bob know the type of error 
and its location and they correct it. They have de- 
stroyed to + 1 EPR pairs. Therefore, Alice and Bob 
again have 2 m — to — 2 good EPR pairs remaining. 

We illustrate the protocol with two examples for 
to = 3, 2 m - 1 = 7 and 2 m - to - 2 = 3. The first 
is if there is a Y error on the 3 rd pair. Then, the 
operators that Alice and Bob measure are: 

X®X®X®X®X®X®X, 

X®X®X<8iX®I®I®I, 

X(g)X(g)I(g)I(g)I(g)I(g)I. 

The first two reveal an error, the third does not. Alice 
and Bob conclude that either the 3 rd or the 4 th pair 
has a Y or Z error. They discard these two pairs. 
The last two measurements are equivalent to X ® 

X <g) I ® I <g) I ® I ® I and I(g>I(g)X(g)X(g)I(g)I(g)I. 
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Thus, one measurement has been on the discarded 
pairs. Therefore, out of the remaining 5 pairs, 2 have 
been measured. They have 3 good EPR pairs. 

In the second example, there is an X error on the 
5 th pair. In this case, Alice and Bob measure 

X®X®X®X®X®X®X, 

Z®Z®Z®Z®I®I®I, 

Z®Z®I®I®Z®Z®I, 

Z®I®Z®I®Z®I®Z. 

The first two measurements detect no error. The 
third and the fourth detect an error. After that, Alice 
and Bob know that there is an X error on the 5 th pair 
and correct it. They have used 4 out of 7 pairs and 
have 3 good pairs remaining. 

3.2 2-EPPs that correct 2 errors 

A more dramatic example is a 2-EPP which produces 
at least 1 good EPR pair from 9 EPR pairs when 
there are up to 2 errors. This is better than the quan- 
tum Hamming bound, which says that the number of 
errors times the number of encoded basis states is at 
most the dimension of the overall Hilbert space: 

2 k ^2&( rC \ <2". (3) 

3=0 ^ J ' 

For t = 2 errors and k = 1, this equation would sug- 
gest ra > 10. The six-pair and 2 m — 1 pair 2-EPPs 
above also exceed the quantum Hamming bound for 
t = 1. It is not known in general whether the 
quantum Hamming bound limits all QECCs, since 
it could potentially be violated by a degenerate code, 
for which distinct errors E and F have the same error 
syndrome but act the same way on codewords (i.e., 
E^F 6 S for a degenerate stabilizer code). How- 
ever, no known QECCs exceed the quantum Ham- 
ming bound, and in fact for t = 2, linear program- 
ming bounds |121 [5] show that n > 11, so our 2-EPP 
beats the best QECC by two EPR pairs. 

The particular 2-EPP we present is based on the 
four-qubit error-detecting code J2J and the five-qubit 



error-correcting code with stabilizer generators 

X ® Z ® Z ® X ® I 
I®X®Z®Z®X (4) 
X®I®X®Z®Z 
Z®X®I®X®Z. 

The five-qubit code can correct one error or detect 
two errors. For the 9-pair EPP, Alice and Bob mea- 
sure the generators of the five-qubit code on the first 
five pairs, and the generators of the four-qubit code 
on the last four pairs. They first use the results of 
both measurements to detect errors. We then have 
the following cases: 

• They detect an error on the last four pairs. In 
that case, there can be at most one error on the 
first five pairs, so they can use the five-qubit code 
to correct the error, producing one good pair. 
They discard the last four pairs, leaving them 
with one good pair overall. 

• They detect an error on the first five pairs but 
none on the last four pairs. In that case, there 
is at least one error on the first five pairs, so 
there could be at most one on the last four. If 
there had been one error on the last four, they 
would have detected it, so Alice and Bob know 
the last four pairs are safe. They discard the 
first five pairs (which could contain two errors), 
and extract the two remaining pairs from the last 
four. In this case, they are left with two good 
pairs. 

• They detect no errors on either set of pairs. If 
there had been any errors (one or two) on the 
first five pairs, they would have detected them. 
Therefore, any errors must be on the last four 
pairs. It is possible, however, that two errors on 
the last four pairs would go undetected. They 
discard the last four pairs, and extract the one 
remaining pair from the first five pairs; there is 
no need for error correction. They are left with 
one good pair. 
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3.3 2-EPPs in higher dimensions 

We can also create EPPs that violate the quantum 
Singleton bound [TT] 



n > At 



(5) 



This bound applies to degenerate quantum codes as 
well as nondegenerate ones, and shows, for instance, 
that the smallest QECC to correct one error has 5 
qubits. The construction we present requires using 
registers with dimension greater than two; qutrits will 
suffice. The quantum Singleton bound also applies 
to higher-dimensional codes, so there is no QECC 
encoding 1 qutrit in 4 and correcting one error. In 
contrast, we present a 2-EPP that corrects one error 
out of only 4 pairs. 

We can generalize the stabilizer formalism to a 
higher dimension d by replacing the qubit Pauli group 
with the group generated by tensor products of X : 
\j) — > \j + 1) and Z : \j) — > where addition is 

modulo d, and w = exp(2iri/d) ^UJ- The eigenvalues 
of elements of this higher-dimensional Pauli group are 



powers of to, and PQ 



to 



r(P,Q) 



QP, where P and Q 



are arbitrary elements of the Pauli group and r(P, Q) 
is an integer function of P and Q. The same basic 
principle allows us to create stabilizer codes in higher 
dimensions: if M\ip) = and MP = uj r PM, then 
M (P\ip)) — ui r P\ip). We can therefore again create 
codes as the joint +l-cigenspace of elements of an 
Abelian subgroup of the Pauli group, and the Pauli 
errors it detects will again be all operators outside 
N(S)\S. 

In particular, we can define a 3-qutrit QECC to 
detect one error using the stabilizer 



x®x ®x 
z®z®z. 



(6) 



Similar codes exist for many larger-dimensional regis- 
ters as well. 3 We can then create a 2-EPP correcting 



3 In particular, Reed-Solomon codes can be used to con- 
struct a code with these parameters over any finite field GF(q) 
with q = p s > 2. Then, treating prime power factors of a reg- 
ister's dimensionality separately allows us to construct an ap- 
propriate QECC for any dimension which is odd or a multiple 
of 4, leaving open the cases where the dimension is 2(2k+l). 



1 error out of 4 qutrit 
measure the generators 
on the first three pairs, 
keep the fourth pair and 
erwise, they discard the 
remaining pair from the 
end up with one reliable 
four. 



EPR pairs. Alice and Bob 
of this error-detecting code 
If they detect an error, they 
discard the first three. Oth- 
last pair and extract the one 
first three. Either way, they 
EPR pair out of the original 



4 Asymptotic Lower Bound 

To construct the above examples of 2-EPPs, we split 
up the EPR pairs and used error detection techniques 
to discard noisy pairs. This does not work well for 
protocols with many pairs and proportionally many 
errors, but EPPs can still do substantially better than 
QECCs in the asymptotic regime. 

Theorem 2. For all n, for any set of errors £ C V , 
there exist 2-EPPs producing k EPR pairs from n 
pairs correcting £ satisfying 



k > n- log 2 \£\ - 2. 



(7) 



Corollary 3. For all n and t, there exist 2-EPPs 
producing k EPR pairs from n pairs with up to t er- 
rors satisfying 



k > n — log 



E 3J 

3=0 



- 2. 



(8) 



That is, 2-EPPs can come within two qubits of the 
quantum Hamming bound for all values of n and t. 
This is in contrast to the case for QECCs, for which 
the best general lower bound is the quantum Gilbert- 
Varshamov bound jo], which shows that there exist 
stabilizer codes satisfying 



k > n — log 2 



21 



z2* 



(9) 



(The sum is taken to 2t rather than t.) In fact, the 
lower bound from the corollary is actually better in 
many cases than the general upper bounds proved on 
QECCs via linear programming |12l IT). 
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Rates achieved by 1 -EPPs and 2-EPPs 



0.25 I 
;e rate (tfn) 



Figure 1 : Lower bounds on rates achieved by 1-EPPs 
and 2-EPPs 



Proof. To prove Theorem |3 we have Alice and Bob 
build up their stabilizer S element by element. At 
each stage, there is a set £ of possible errors compat- 
ible with all available information. Initially, for in- 
stance, £ may be the set of all Pauli errors of weight 
up to t (as in the corollary), and later £ would be 
the set of Pauli errors of weight up to t which have 
a particular error syndrome relative to the current 
stabilizer S. As Alice and Bob add more generators 
to their stabilizer, the set £ shrinks. Once they have 
narrowed £ down to a single error, they can correct 
the state. If they have measured r generators at this 
point, they have n — r EPR pairs remaining after de- 
coding. Thus, the goal is to show that Alice and Bob 
can reduce the size of £ to 1 by measuring at most 
n — k stabilizer generators. It is sufficient to consider 
the case where £ does not include two Pauli operators 
differing only by a factor of —1 or ±i. 

Suppose we are somewhere in the middle of this 
procedure, with the set £ of currently possible errors. 
Alice and Bob now must choose a new generator M 
to measure and add to S. M must commute with ev- 
erything in S, of course, and should be independent 
of the previous elements of S (i.e., M £ N(S) \ S). 
There are many possible Ms, but Alice and Bob wish 
to choose one that comes as close as possible to di- 
viding the set of possible errors in half. That is, M 
commutes with close to half of £ and anticommutcs 



with close to half of £. 

Let C{M) C £ be the set of possible errors that 
commute with M and A(M) C £ be the set of pos- 
sible errors that anticommute with M. Then, when 
Alice and Bob measure M, the new set of possible 
errors will be either C(M) or A(M), depending on 
the measurement result. In the worst case, it will be 
the larger of these two sets, so our goal is to show 
that max(\C(M)\,\A(M)\) is not much larger than 
|£|/2. Alice and Bob repeat this process until the set 
of possible errors has shrunk to a single operator, at 
which point they know the error and can correct it. 
The number of generators they must add to the sta- 
bilizer to do this is n — k, and we wish to show that 
in the worst case, n — k is not much larger than 



log 2 \£\ = log 2 



E 3 " 



(10) 



For any E,F € £, we say P € N(S) separates 
the pair (E,F) iff E$F € A(P), so E e A{P) and 
F € C(P) or vice-versa. In fact, precisely half of 
the elements P e N(S) separate any pair (E,F), 
but no element of S does (since E and F have the 
same error syndrome relative to S). If \S\ = 2 r , then 
(iV(S')l = 2 n ~ r , so each pair (E,F) is separated by 
2 n-r-i elements of N(S) \ S. There are ) pairs 
total, so collectively, the elements of N(S)\S separate 
2«— r-i p a j rs> On average, then, the elements of 
N(S) \ S separate 



2 «- 



T 



> 



1 



(11) 



pairs each. In particular, there exists M € N(S) \ S 
that separates at least this many pairs. 

Now, M has the sets C(M), A(M) and separates 
\C{M)\ ■ \A(M)\ pairs. Also note \C(M)\ + \A(M)\ = 
\£\. Thus, 



m(\£ | — m) > 



me 



2 V 2 



(12) 



where m = max(\C(M)\,\A(M)\). For instance, 
when \£\ — 4, we find m(4 — m) > 3, and since m is 
an integer, m = 2. 
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If we set to — \£\/2 + e, then we find 
i|£| 2 - e 2 >i(|£| 2 -|£|), 



(13) 



or 



e 2 < |f |/4. (14) 

Using H14|) repeatedly, and bearing in mind that to 
must always be an integer, we can find the number of 
steps necessary to bring any particular initial value 
of \£\ down to 1. At any stage, given £ , choosing 
another stabilizer generator by the above rule gives 
us a new set £' of possible errors, with 



\£'\ < (\£\ 



W2. 



(15) 



We can define an integer sequence to^ such that 
mo = 1 and Hi i is the largest integer such that 



(rrii + y / ro7)/2 < TOj_i + 1. 



(16) 



Thus, whenever \£\ < mi, it follows that \£'\ < 
We can therefore reduce the set of possible errors to 1 
in at most i steps. Below we give mi for small values 
of i: 



1 



7 <- 12 <- 21 <- 37 



67 



124 <- 234. 
(17) 



For larger values of i, we note that 



2m, > m l+1 > L2(m 4 + 1) - ^2{m, + 1)J (18) 
> 1m l -y/2mi- I- (19) 



If 

then 



> to,- > 2*~ 2 



2' > to 1+ i > 2 1 - 1 + 2Si -V¥-l. 



(20) 



(21) 

Let S i+1 = 26i - 2 1 / 2 - 1, and let 8$ = 60 (since 2 7 > 
to 8 = 124 > 2 6 + 60). Then for i > 8, S. t > (1.5) l " 8 60 
by induction: 

Si+i > (1.5) l - 7 60 + [(1.5) 4 ~ 8 30 - (V2) l - 8 16 - 1 . 

(22) 

In particular, 6{ > for i > 8, so for i > 8, 2* 1 > 
to, > 2 J_2 . Therefore, when |f | < 2- 7 , we can reduce 
the set of possible errors to 1 in at most j + 2 steps, 
proving the theorem. 

□ 



Note that this technique of narrowing down the set 
of possible errors fails if we try to apply it to QECCs. 
While we can indeed choose a single stabilizer gener- 
ator Mi which separates £ into approximately equal 
sets A(Mi), C(M 1 ), choosing the second generator 
M2 is more difficult. For 2-EPPs, we need only con- 
sider one of the two sets A(Mi), C(M 1 ), whichever 
is indicated by the first measurement. For a QECC, 
we do not know which set will be selected, so the 
second generator M 2 must divide both of these sets 
approximately in half. The problem compounds at 
later steps, as the third generator chosen must si- 
multaneously divide up four sets of possible errors, 
and the i th generator must be chosen to evenly di- 
vide up 2 Z_1 different sets of possible errors all at 
once. Clearly this is substantially more difficult than 
splitting just a single set in half, and results in a sig- 
nificantly reduced efficiency for the QECC compared 
to a 2-EPP. 



5 Conclusion 

We have considered the minimum distance scenario 
for 2-EPPs and given a number of examples of 2- 
EPPs that are more efficient than any QECC. The 
small block EPPs we present might be useful for 
quantum communication in near-future scenarios. 
The asymptotic construction we give of 2-EPPs is not 
very practical, since finding the optimal set of mea- 
surements appears to be a computationally difficult 
task. For practical applications of 2-EPPs, we want 
the equivalent of an efficient decoding algorithm — 
namely, an efficient algorithm to tell us what to mea- 
sure next, and, once all measurements are complete, 
to tell us how to correct the state. 

One way to find such EPPs might be to consider 
QECCs with good list-decoding algorithms. Since 
classical error-correcting codes can be substantially 
more efficient when we only demand list decoding 
rather than minimum distance decoding |14j , it seems 
very likely that QECCs would have the same prop- 
erty. Then we might be able to convert the list- 
decoded QECC to a minimum-distance 2-EPP by 
choosing just a few additional generators to narrow 
down the short list of possible errors to a single error. 
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